This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/0-4nqiPOGteiK9VP6x_sLK2mkJo.roa File: 0-4nqiPOGteiK9VP6x_sLK2mkJo.roa (raw, json) Hash identifier: D/G/NyWtohGa+4A1yzgQpS5Fkg8In30pL4ywg6qyHJ4= Subject key identifier: D3:EE:27:AA:23:CE:1A:D7:A2:2B:D5:4F:EB:1F:EC:2C:AD:A6:90:9A Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019B77C7185B29D120CCD9E1F70329D89B3D Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/0-4nqiPOGteiK9VP6x_sLK2mkJo.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21266 IP address blocks: 80.90.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:5b:29:d1:20:cc:d9:e1:f7:03:29:d8:9b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3ee27aa23ce1ad7a22bd54feb1fec2cada6909a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:f5:e6:23:c7:8e:e2:ca:dc:d3:3f:af:20: 5d:67:cc:b8:42:ec:c7:02:e4:5c:53:c0:dc:ef:a8: 34:13:cd:0a:5e:63:5b:00:c8:b1:98:eb:e5:c8:36: 17:02:3a:66:5a:7d:11:73:45:8e:f7:11:1e:db:4b: 5f:30:44:66:43:6e:d7:3b:c7:fd:e4:0d:15:6e:7e: bd:41:81:68:72:62:f6:bc:e6:4e:54:5c:2a:38:6b: e1:dc:b6:4a:0a:d5:97:98:32:bd:83:2c:79:86:9a: 4d:d8:71:13:69:ce:bb:a4:2a:2d:fb:51:00:f0:d1: 97:a2:51:3f:7f:45:e2:ba:b5:1b:9a:f1:92:b5:bc: 9d:f4:3d:11:5c:44:8b:a8:5d:a9:c8:fe:1e:98:d8: 5c:2a:43:b9:88:df:90:e1:a5:8a:cf:7e:30:57:34: aa:0b:a5:bd:27:a4:a7:cf:d8:ae:ce:90:85:55:2d: 70:5e:40:74:e6:cd:5f:26:7f:f5:84:d7:f6:50:27: 8e:c8:a6:58:f5:1f:f6:ca:12:76:1a:a4:81:a7:d1: 14:51:18:1e:50:e3:1c:16:a8:98:45:a8:0b:eb:01: d9:fe:dd:de:5d:9c:95:ff:03:53:12:5c:ab:eb:4a: 00:11:dc:95:6d:bc:54:bd:10:17:fc:17:a7:0e:43: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EE:27:AA:23:CE:1A:D7:A2:2B:D5:4F:EB:1F:EC:2C:AD:A6:90:9A X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/0-4nqiPOGteiK9VP6x_sLK2mkJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.64.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:ff:40:56:75:f6:24:1b:82:f1:bc:59:64:b7:80:f7:2e:91: d2:ef:41:e5:9f:97:b7:31:cf:a5:3a:ca:94:d6:86:0c:27:9d: e6:f3:a7:2b:d4:27:46:88:df:f3:50:1c:db:43:4c:a6:97:74: 5c:5c:bb:63:97:da:3d:b4:4a:d1:a0:a5:d0:7b:af:68:b5:ca: 88:1a:96:91:07:be:d0:b3:b4:d3:82:2b:f2:f2:73:c6:13:5b: 21:99:0e:8b:9f:7b:74:3c:4f:70:02:a4:c5:7e:e2:f5:77:04: f2:a8:65:d4:d6:98:ca:0e:f8:ff:cc:dd:1f:86:a1:68:af:99: 02:cb:a6:9a:48:63:38:20:27:13:9e:7e:30:63:2a:a3:d7:67: 9f:15:6f:d2:34:b5:8e:ef:c9:18:40:06:2a:9d:ba:1c:51:91: af:a5:c2:ad:bc:1e:c3:df:cf:9a:1e:27:8f:8f:98:b3:ae:0d: d3:8f:3e:7d:94:2a:19:09:ab:b8:f3:2d:4c:3b:82:e9:3b:c3: eb:65:ed:14:ef:0a:b2:98:38:bc:d2:d3:2d:16:1f:b4:96:35: c9:11:12:34:a6:c3:5d:d9:c4:e2:da:95:85:37:6d:99:ec:ee: c6:dc:d5:38:45:02:f5:da:fd:c2:e4:53:c7:7f:43:0f:c3:40: c4:76:1d:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxhbKdEgzNnh9wMp2Js9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2VlMjdhYTIzY2UxYWQ3YTIyYmQ1NGZlYjFmZWMyY2FkYTY5MDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3715iPHjuLK3NM/ryBdZ8y4QuzH AuRcU8Dc76g0E80KXmNbAMixmOvlyDYXAjpmWn0Rc0WO9xEe20tfMERmQ27XO8f9 5A0Vbn69QYFocmL2vOZOVFwqOGvh3LZKCtWXmDK9gyx5hppN2HETac67pCot+1EA 8NGXolE/f0XiurUbmvGStbyd9D0RXESLqF2pyP4emNhcKkO5iN+Q4aWKz34wVzSq C6W9J6Snz9iuzpCFVS1wXkB05s1fJn/1hNf2UCeOyKZY9R/2yhJ2GqSBp9EUURge UOMcFqiYRagL6wHZ/t3eXZyV/wNTElyr60oAEdyVbbxUvRAX/BenDkOhCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPuJ6ojzhrXoivVT+sf7CytppCaMB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvMC00bnFpUE9HdGVpSzlWUDZ4X3NMSzJta0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFpAMA0G CSqGSIb3DQEBCwUAA4IBAQAv/0BWdfYkG4LxvFlkt4D3LpHS70Hln5e3Mc+lOsqU 1oYMJ53m86cr1CdGiN/zUBzbQ0yml3RcXLtjl9o9tErRoKXQe69otcqIGpaRB77Q s7TTgivy8nPGE1shmQ6Ln3t0PE9wAqTFfuL1dwTyqGXU1pjKDvj/zN0fhqFor5kC y6aaSGM4ICcTnn4wYyqj12efFW/SNLWO78kYQAYqnbocUZGvpcKtvB7D38+aHieP j5izrg3Tjz59lCoZCau48y1MO4LpO8PrZe0U7wqymDi80tMtFh+0ljXJERI0psNd 2cTi2pWFN22Z7O7G3NU4RQL12v3C5FPHf0MPw0DEdh2R -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:24 2026 by rpki-client